CVE-2026-72150

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where the xprt create args structure is allocated on the stack without initialization within the rpc sysfs xprt switch add xprt store() function. Although some fields are populated manually, critical variables such as srcaddr, bc xps, and flags contain uninitialized stack garbage. This can result in a kernel panic when the xs setup xprt() function dereferences the srcaddr variable, an information leak if srcaddr points to sensitive stack data, or unpredictable behavior if the flags variable contains random bits.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.